PT-2026-80931

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...

PT-2026-80904

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...

CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

EUVD-2026-65145

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

syft

Syft A CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Exceptional for vulnerability detection when used with a scanner likeGrype...

cyclonedx-cli

root@kitploit: / / / / / \ |/ / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / / / // / | / // // / /, ///// /////|| /// // Usage: cyclonedx command options Options: --version Show version information -?, -h, --help Show help and usage information Commands: add...

CVE-2026-20896-Gitea-Authentication-Bypass

CVE-2026-20896 - Bypass dell'autenticazione di Gitea ≤1.26.2 1. Cos'è Gitea? Gitea è una piattaforma di hosting Git leggera e open-source che consente a organizzazioni e sviluppatori di gestire repository di codice sorgente, tracciare issue, revisionare le modifiche e collaborare su progetti...

SleepyCrypt

SleepyCrypt Una funzione shellcode per cifrare l'immagine di un processo in esecuzione in memoria durante la fase di sleep. Questo è il codice complementare al mio post sul blog qui. Build È sufficiente eseguire build.sh per compilare il codice C, estrarre la sezione .text come shellcode e...

grafana-CVE-2024-9264

grafana-CVE-2024-9264 Questo repository contiene dettagli su CVE-2024-9264. Costruisce anche una versione vulnerabile di grafana, che può essere scaricata da ghcr.io/patrickpichler/grafana-cve-2024-9264:11.0.0...

AmzWord

AmzWord eine automatisierte Angriffskette basierend auf CVE-2022-30190, 163-E-Mail-Backdoor und Bild-Steganographie Dank der folgenden GitHub-Repositories haben wir Teile des Codes referenziert und modifiziert, um unsere Arbeit zu integrieren und umzusetzen: gdog follina virtual-reality...

dasel-hardened-container

dasel v3.3.1 container indurito Questo è un pacchetto melange e una immagine container apko per dasel v3.3.1 con una patch in fase di build per CVE-2026-33320 espansione illimitata degli alias YAML. L'immagine è costruita interamente da un APK prodotto localmente - non viene utilizzata alcuna...

CVE-2026-74723

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in...

EUVD-2026-64410

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in...

CVE-2026-74723

A slab-out-of-bounds read in the Linux kernel's btrfs LZO decompression path is triggered when a crafted btrfs image contains an inline LZO compressed file extent with only an LZO header but no segment header or payload. The lzo_decompress() function reads beyond the item boundary; if the extent ...

CVE-2026-74723 btrfs: lzo: reject inline extents without valid headers

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in...

CVE-2026-76606

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik 4.7.2...

CVE-2026-76605

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik 4.7.2...

EUVD-2026-64331

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik 4.7.3 - ???...

CVE-2026-76606 Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik 4.7.2...

CVE-2026-76606

Fabrik is a Joomla extension that is vulnerable to path traversal via its image element in versions prior to 4.7.3 . The CVSS 4.0 base score is 10.0 (CRITICAL) , indicating network-exploitable impact with no required privileges or user interaction, affecting confidentiality, integrity, and availa...